CVE-2024-42911

HighRCE

Published: 14 January 2025

Published

14 January 2025

Modified

15 April 2026

KEV Added

—

Patch

—

CVSS Score 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS Score 0.0172 82.5th percentile

Risk Priority 16 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2024-42911 is a high-severity Code Injection (CWE-94) vulnerability in Ecovacs (inferred from references). Its CVSS base score is 7.4 (High).

Operationally, ranked in the top 17.5% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-2 (Flaw Remediation).

Threat & Defense at a Glance

What defenders deploy: see the NIST 800-53 controls recommended below.

Threat & Defense Details

Mitigating Controls (NIST 800-53 r5)AI

SI-2 Flaw Remediation good match

prevent

Timely flaw remediation through firmware update to version 1.24.0 directly eliminates the WiFi RCE vulnerability in affected Deebot devices.

SI-10 Information Input Validation good match

prevent

Validates all information inputs over WiFi connections to prevent the code injection (CWE-94) enabling remote code execution.

AC-18 Wireless Access partial match

prevent

Establishes authentication, encryption, and usage restrictions for wireless access, mitigating unauthorized WiFi exploitation vectors for this RCE.

NVD Description

ECOVACS Robotics Deebot T20 OMNI and T20e OMNI before 1.24.0 was discovered to contain a WiFi Remote Code Execution vulnerability.

Deeper analysisAI

CVE-2024-42911 is a WiFi Remote Code Execution vulnerability (CWE-94) in ECOVACS Robotics Deebot T20 OMNI and T20e OMNI devices running versions prior to 1.24.0. The issue allows attackers to execute arbitrary code over WiFi connections and carries a CVSS v3.1 base score of 7.4 (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N), reflecting network accessibility, high attack complexity, no privileges or user interaction required, and high impacts to confidentiality and integrity but none to availability.

Remote, unauthenticated attackers can exploit this vulnerability over the network by leveraging WiFi access to the affected devices. Successful exploitation enables full remote code execution, potentially allowing control over the robot vacuum's functions, data access, or further network pivoting depending on the executed code.

ECOVACS has published security advisory DSA20250113001 at https://www.ecovacs.com/global/userhelp/dsa20250113001 detailing the issue, with mitigation available by updating affected Deebot T20 OMNI and T20e OMNI devices to version 1.24.0 or later. Additional information is available at http://ecovacs.com.